Privacy Policy

1. Who we are

This policy is published by Samadhaan Labs ("Samadhaan Labs", "we", "us"), a partnership firm with its principal place of business at 52 Nav Jeevan Society, Pachpedi Naka, Raipur, Chhattisgarh 492001, India. We operate the SucsessMaperrs mobile application and website.

This policy explains what personal data we collect, why, how we use and protect it, and your rights under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian laws. If anything here is unclear, email Direction@SucsessMaperrs.com.

2. Data we collect

2.1 Information you give us

• Account: full name, email address, mobile number, age, stage (school / college / professional). We check your mobile number by sending it a one-time code.
• Assessment responses: your answers to the six-assessment psychometric profile.
• Birth details (optional): date, time and place of birth. We ask for them when you sign up, and you can skip them. If you give them, we use them to calculate your birth chart.
• WhatsApp choice: whether you want your verification code on WhatsApp, if we asked you.
• Chat messages you send to the in-app guide.
• Parental consent records where required (see Section 6).
• Support correspondence you send to Direction@SucsessMaperrs.com or via the contact form.

2.2 Information collected automatically

• Device: type, OS version, app version, rough location (country / state).
• Usage: pages visited, features used, session duration.
• Log data: IP address (truncated after 30 days), timestamps, error traces.
• Crash reports: what the app was doing when it crashed (device model, OS version, app version and a technical trace), through Firebase Crashlytics.

3. How we use it

• To generate your personalised career intelligence report (the service you came here for).
• To check your mobile number by sending a one-time code, by WhatsApp or SMS.
• To calculate your birth chart and keep its timing up to date, if you gave your birth details.
• To answer your questions in the in-app chat.
• To communicate account updates and product notices.
• To improve the assessment and the role graph (using anonymised, aggregated data only).
• To comply with legal and regulatory obligations.
• To detect and prevent fraud or abuse.

We do not use your data for automated behavioural profiling to serve ads, and we do not share data with advertising networks.

4. Legal basis (DPDP Act)

We process personal data on one of the following DPDP bases:

• Consent — for account creation, optional birth-detail processing, receiving your code on WhatsApp, and marketing emails. You can withdraw consent at any time from your account settings.
• Legitimate use as defined in Section 7 of the DPDP Act — for fraud prevention, legal compliance, and defending claims.

5. Sharing & transfers

We share data only with these service providers, and only what each one needs:

• Google (Firebase and Google Cloud), USA: stores your account, database and files, runs our servers, and sends SMS codes, app notifications and crash reports. Our database is in Google's United States region.
• Meta (WhatsApp): only if you choose to get your code on WhatsApp — your mobile number and the one-time code. Once the message is in WhatsApp, WhatsApp's own privacy policy also applies to it.
• VedicAstroAPI: only if you give your birth details — your date and time of birth, the coordinates of your birthplace and its time zone, to calculate your chart. Never your name or contact details.
• Google Maps Platform: the place name you type when you search for your birthplace, to find the place, its coordinates and its time zone. The search is sent from our servers.
• OpenRouter (USA), and the AI model it passes requests to (currently Google Gemini): your assessment results, the parts of your profile and reports a request needs (and your birth chart, if you gave your birth details), and your chat messages — to write your reports and answer your questions. Never your email address or mobile number.
• Resend (USA): your email address and the emails we send you, such as reminders and the link to a copy of your data.
• Apple and Google: if you sign in with Apple or Google, or pay through the App Store or Google Play, they handle that sign-in or payment under their own terms.

Most of these providers store or process data outside India, mainly in the United States. The DPDP Act allows this, except to countries the Central Government restricts by notification. None of these providers is in such a country.

We never sell personal data.

6. Users under 18 (Children's data)

Under the DPDP Act, any user below the age of 18 is a "child" and processing requires verifiable consent from a parent or lawful guardian. We are implementing a verifiable parental/guardian consent flow for users under 18; here is how it will work once it is live in the app:

• At sign-up we will require the parent/guardian's name, relationship, and email, and send a verification link to that email before any processing of the child's data begins.
• We do not track children's behaviour for targeted advertising.
• We do not show children advertisements of any kind.
• Until the automated flow is live, parents/guardians can contact us to arrange consent, or to access, correct, or request deletion of a child's data, at any time by writing to Direction@SucsessMaperrs.com.

7. Retention

• Assessment responses & reports: retained for 24 months after your last login, then deleted.
• Birth details: kept with your account so your chart and its timing stay up to date. You can delete them at any time in Astrology Data, and they are deleted when you delete your account.
• Verification codes: stored only in scrambled (hashed) form, and deleted automatically within 2 days.
• Account (email, name, mobile): retained until you delete your account; deletion completes within 30 days of request.
• Anonymised, aggregated data (no re-identification possible) may be retained indefinitely for research.
• IP logs: 30 days.

8. Your rights

Under the DPDP Act you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or outdated data.
• Erase your data (subject to limited legal exceptions) — you can delete your account and all associated data from within the app.
• Withdraw consent (without affecting past lawful processing).
• Get a copy of your personal data: in the app, open Security & privacy and choose "Email me a copy of my data", or write to us.
• Nominate another person to exercise these rights if you are unable to.
• Grievance redressal (see Section 10).

To exercise any right, email Direction@SucsessMaperrs.com. We respond within 30 days.

9. Security

• Data at rest is encrypted with AES-256.
• Data in transit is encrypted with TLS 1.2+.
• Access is limited to a small number of authorized personnel and is audit-logged.
• We perform annual third-party security reviews.
• In the event of a personal data breach affecting you, we will notify you and the Data Protection Board of India in accordance with the DPDP Act.

10. Grievance Officer & Data Protection Officer

If you are not satisfied with our response, you can approach the Data Protection Board of India under Section 27 of the DPDP Act.

11. Changes

Material changes to this policy will be communicated via email and in-app notification at least 14 days before they take effect. The date at the top shows when this version was published and when any changes in it take effect.

12. Contact

For general privacy questions: Direction@SucsessMaperrs.com. For formal grievances: Direction@SucsessMaperrs.com.